Howard Chu
8699e5f32e
ITS#9282 fix crash in nonpresent_callback
...
In a standard Refresh present phase, the provider sends no cookie
since it is only listing the entries that existed as of the time
in the cookie the consumer sent. In this case the consumer only
needs to check entryCSNs against its last sent cookie.
2020-08-31 19:36:10 +01:00
Howard Chu
9535e757df
ITS#9327 fix prev commit
2020-08-31 13:33:58 +01:00
Howard Chu
0ce83b26af
ITS#9330 Fully serialize delta-sync
...
Don't depend on accesslog overlay's serialization
2020-08-29 01:13:04 +00:00
Howard Chu
edc94862b7
ITS#7639 fix crash in config_delete
...
Additional fix to 41352ea34d
The overlay must be deleted from the backend before the
callback can execute. In particular, it must be done before
the threadpool is unpaused.
2020-08-29 00:13:19 +00:00
Howard Chu
f883a57593
ITS#8427 don't set tls_ctx if TLS wasn't requested
...
Also, set any remaining TLS options that weren't carried along
in the TLS ctx.
2020-08-28 18:44:35 +01:00
Howard Chu
d5ed7c5027
ITS#9054, #9318 document new TLS options in slapd
2020-08-28 11:09:25 +01:00
Quanah Gibson-Mount
49b1e8b16f
ITS#9282 - Fix hard coded backend
2020-08-27 15:16:38 +00:00
Howard Chu
536767798b
ITS#9054 fix typo
2020-08-27 11:22:58 +01:00
Quanah Gibson-Mount
baf5571d45
Last commit was for ITS#8725, not ITS#8845
2020-08-26 21:58:05 +00:00
Quanah Gibson-Mount
8d31219647
More for ITS#8845, skip cleanup on async op with extended operations
2020-08-26 21:55:39 +00:00
Quanah Gibson-Mount
8889f905b5
ITS#9323 - Regenerate configure
2020-08-26 21:43:21 +00:00
Howard Chu
e3faae939c
ITS#9328 cldap: check for error on connected socket
...
libldap doesn't use a connected socket for UDP sessions, but 3rd
parties can, passed in with ldap_init_fd().
2020-08-26 20:53:38 +00:00
Howard Chu
9900794af1
ITS#9329 Re-fix merge_state
...
A bit uglier but more straightforward.
2020-08-26 21:00:00 +01:00
Quanah Gibson-Mount
c1411b8199
ITS#9323 - Limit to OpenSSL 1.0.2 or later
2020-08-25 21:52:04 +00:00
Howard Chu
9666306d86
ITS#9329 syncrepl: fix regression from ITS#9282
2020-08-25 21:13:22 +00:00
Fabrice Fontaine
8df03b435e
ITS#9327 - Fix stripping when cross-compiling
...
Probably-Signed-off-by: Dave Bender <bender@benegon.com>
[yann.morin.1998@free.fr: patch was made by Dave, but he
forgot his SoB line, so I added it]
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
[Retrieved from:
https://git.buildroot.net/buildroot/tree/package/openldap/0001-fix_cross_strip.patch ]
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2020-08-25 19:54:59 +00:00
Howard Chu
5aa7e0f69b
ITS#9324 syncrepl: don't wait forever in Refresh mode
...
Just poll for available data, same as Persist mode.
Clarify retry/return states from do_syncrep2
2020-08-24 15:12:24 +00:00
Howard Chu
88e569d857
ITS#9249 librewrite: fix malloc/free corruption
...
If substitution parsing fails, would attempt to free a mapping
that hadn't been allocated yet.
Also, on failure, caller in saslauthz would attempt to free a
rwinfo struct that hadn't been allocated.
2020-08-23 19:32:51 +00:00
Fredrik Roubert
8a521c17aa
ITS#9232 - Implement caseIgnoreListSubstringsMatch.
2020-08-21 21:45:19 +00:00
Quanah Gibson-Mount
f876eac3d2
ITS#9311 - Contrib modules to be singular
2020-08-21 19:34:27 +00:00
Quanah Gibson-Mount
aa78299346
ITS#9311 - Correctly mark overlays as singular
2020-08-21 19:34:27 +00:00
Howard Chu
650b1404c2
ITS#9054, #9318 add new TLS options to slapd bindconf
...
For use with back-ldap/back-meta/syncrepl/etc
2020-08-21 20:06:56 +01:00
Howard Chu
608a822349
ITS#9318 add TLS_REQSAN option
...
Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.
2020-08-21 18:05:08 +00:00
Howard Chu
2386a11649
ITS#9054 Add support for multiple EECDH curves
...
Requires OpenSSL 1.0.2 or newer
2020-08-21 07:58:07 +01:00
Quanah Gibson-Mount
092d0a893f
ITS#9121 - Use memberOf instead of dgMemberOf
2020-08-20 00:05:26 +00:00
Howard Chu
12e11c9b84
ITS#9121 slapo-dynlist, -memberof: define memberOf if needed
...
Ignore if it's defined already. Make it no-user-mod.
2020-08-18 23:49:26 +00:00
Howard Chu
9d2f15307d
ITS#7926 dynamic changes to olcListenerThreads
...
Reallocates sockets from old to new listener threads
2020-08-18 22:37:50 +01:00
Howard Chu
2f94318f06
ITS#7926 support multiple config cleanup functions per op
...
Prep for main changes
2020-08-18 22:00:58 +01:00
Howard Chu
b0d7308371
ITS#9135 fix index error on collapsed range
2020-08-13 18:18:45 +01:00
Quanah Gibson-Mount
9c78a81d05
Merge remote-tracking branch 'origin/mdb.RE/0.9' into master
2020-08-11 18:28:02 +00:00
Quanah Gibson-Mount
20403b7b38
Release 0.9.26
2020-08-11 18:24:07 +00:00
Quanah Gibson-Mount
00b14b1e28
ITS#9133 - Fix syncprov to be singular.
2020-08-10 23:41:07 +00:00
Howard Chu
2721246545
ITS#9309 fix exit status on prev commit
2020-08-10 23:18:48 +01:00
Howard Chu
827a5577f2
ITS#9309 test rejection of redundant ppolicy config
2020-08-10 23:08:37 +01:00
Howard Chu
633d40b0ac
For ITS#9309 fix check for duplicate overlays
...
and pass error message back to frontend
2020-08-10 16:40:54 +01:00
Howard Chu
c8c39b8468
ITS#9309 don't allow ppolicy to be configured more than once on a backend
2020-08-10 16:07:39 +01:00
Quanah Gibson-Mount
85399807b4
ITS#9279 - Add draft for vchu-ldap-pwd-policy
2020-08-07 21:39:19 +00:00
Howard Chu
42644cbc34
ITS#7344 fix test064-constraint
...
Remove bash-isms
2020-08-07 02:31:18 +01:00
Quanah Gibson-Mount
1b3fcd4e75
ITS#9308 - ensure "i" is initialized
2020-08-05 23:06:49 +00:00
Quanah Gibson-Mount
9688f032c5
ITS#9307 -- regenerate configure
2020-08-05 16:31:37 +00:00
Ryan Tandy
daf3bd27a8
ITS#9307 --enable-<option>=mod requires --enable-modules
...
Provide a more specific diagnostic when configuring with
--enable-<option>=mod but not --enable-modules. Make this an error for
both backends and overlays, and remove the automatic fallback to static.
2020-08-05 03:29:42 +00:00
Howard Chu
d4c7126e67
ITS#9279 test Netscape password expiration controls
...
and do some LDIF cleanup
2020-08-04 22:04:14 +00:00
Howard Chu
1a7864699c
ITS#9279 Handle Netscape controls in client tools
2020-08-04 22:04:14 +00:00
Howard Chu
e3875c1819
ITS#9279 Netscape passwordExp controls came from draft-vchu-ldap-pwd-policy
2020-08-04 22:04:14 +00:00
Howard Chu
8849d83f75
ITS#9279 fix Netscape password_expired control
2020-08-04 22:04:14 +00:00
Quanah Gibson-Mount
63d6f680ba
ITS#8753 - Fix reference to ldaps to be StartTLS to accurately reflect what the test is doing
2020-07-30 23:26:22 +00:00
Howard Chu
138c492696
ITS#9302 fix pwdFailireTime mutex scope
2020-07-30 17:53:25 +01:00
Arvid Requate
0e675be7ef
ITS#9302 ppolicy: avoid pwdFailureTime race condition
2020-07-30 17:32:32 +01:00
Howard Chu
4cf90e84de
ITS#9295 use replace on single-valued attrs
...
For delta-sync as well as regular sync
2020-07-29 16:15:42 +01:00
Ondřej Kuzník
917fcc03ee
ITS#9279 Send Netscape expired control as a bare string
2020-07-27 14:22:24 +02:00